A redundant PLC system uses two programmable logic controllers to keep warehouse automation running when one controller or communication path fails. In a logistics warehouse, PLCs coordinate conveyors, sorters, barcode scanners, robotic pickers, motor drives, and safety devices. Redundancy matters because a short control outage can stop material flow, delay orders, and create unsafe machine states.
The goal is high availability, meaning the system continues operating with little or no interruption during a fault.
Key Facts
- Availability A = uptime / (uptime + downtime)
- For one controller, A = MTBF / (MTBF + MTTR)
- Redundant PLCs often use active standby or active active operation to reduce downtime after a failure.
- Failover time is the time between detecting a fault and the backup PLC taking control.
- Total scan time includes input read time, logic execution time, communication time, and output update time.
- For independent parallel controllers, reliability can be estimated as Rparallel = 1 - (1 - R1)(1 - R2)
Vocabulary
- PLC
- A programmable logic controller is an industrial computer that reads inputs, runs control logic, and commands outputs for machines.
- Redundancy
- Redundancy is the use of backup components or paths so a system can keep working after one part fails.
- Failover
- Failover is the process of transferring control from a failed primary device to a backup device.
- I/O module
- An I/O module is hardware that connects sensors and actuators to a controller through input and output signals.
- Heartbeat signal
- A heartbeat signal is a repeated status message used to prove that a controller or network device is still alive and communicating.
Common Mistakes to Avoid
- Assuming redundancy means zero downtime is wrong because failover, diagnostics, and output synchronization can still take a finite amount of time.
- Connecting both PLCs to the same single power supply is wrong because that creates a common failure point that can disable both controllers.
- Ignoring scan time during failover is wrong because delayed input reading or output updating can cause conveyors, sorters, or robots to act late.
- Treating safety circuits as ordinary control outputs is wrong because emergency stops and safety interlocks must meet safety standards and remain reliable during controller faults.
Practice Questions
- 1 A warehouse PLC system has 5000 hours of uptime and 5 hours of downtime in one year. Calculate its availability as a decimal and as a percent.
- 2 A redundant control system has a failover time of 80 ms. A conveyor belt moves at 1.5 m/s. How far does a package move during the failover interval?
- 3 A warehouse has two PLCs, two network switches, and two power supplies, but both PLCs share one sensor bus for all inputs. Explain why this shared bus may still be a single point of failure and suggest one improvement.